June 27, 2011 at 2:58 am
Hi
I have encrypted four of our databases using SQL Encryption.
We have installed a Ncipher and can communicate with the server with no problem.
I create a cryptographic provider with no problem.
Then I encrypt the database using SQL Encryption please see below.
This all works well for +- 5 days, I have noticed that a dts job from sql 2000 then locks the database process.
The dts job runs every night the first few days no issues.
It seems like the database is running out of connections, I cannot detach the databse nor can I select properties on the database. I cannot find a error that actually explain to me what happens with the database.
The only alternative I have is to physically shutdown the server, and then we are again fine for a couple of days, then locks on the database start again. If I decrypt the database and leave the Ncipher in production there is no issues or locks.
CREATE CREDENTIAL prod_tde_credential
WITH IDENTITY = 'XXXX',
SECRET = '****l'
FOR CRYPTOGRAPHIC PROVIDER nCipher_Provider
CREATE ASYMMETRIC KEY HSM_AsymKey
FROM PROVIDER nCipher_Provider
WITH
ALGORITHM = RSA_2048,
CREATION_DISPOSITION = CREATE_NEW,
PROVIDER_KEY_NAME = 'key4TDE'
CREATE LOGIN Hsm_Login
FROM ASYMMETRIC KEY HSM_AsymKey
GO
Use Reporting
CREATE DATABASE ENCRYPTION KEY
WITH ALGORITHM = AES_256
ENCRYPTION BY SERVER ASYMMETRIC KEY HSM_AsymKey
GO
ALTER DATABASE Reporting SET ENCRYPTION ON;
June 27, 2011 at 3:07 am
In the log file I got the following error
2011-06-27 04:15:14.63 spid59 Error: 33055, Severity: 16, State: 1.
2011-06-27 04:15:14.63 spid59 Exception happened when calling cryptographic provider 'nCipher SQLEKM Provider' in the API 'SqlCryptOpenSession'. SQL Server is terminating process 59. Exception type: Win32 exception; Exception code: 0xc000000d.
2011-06-27 04:15:14.64 spid7s Using 'dbghelp.dll' version '4.0.5'
2011-06-27 04:15:14.64 spid7s ***Stack Dump being sent to Z:\Data\MSSQL10_50.MSSQLSERVER\MSSQL\LOG\SQLDump0008.txt
2011-06-27 04:15:14.64 spid7s SqlDumpExceptionHandler: Process 7 generated fatal exception c000000d EXCEPTION_INVALID_CRT_PARAMETER. SQL Server is terminating this process.
October 4, 2011 at 5:58 pm
I have same exact issue, did you ever find a resolution? I have worked with MSFT on TDE And Sharepoint SIde without any.
October 4, 2011 at 6:11 pm
Hi Jamie
Yes it was suggested to upgrade MSVCr80.dll file. I did that and resolved the problem. Have not had an incident since then.
That was over 2 months ago.
I suppose that will depend on who is your HSM Vendor.
I was also pleasantly supprised with Microsoft's support, so if you get stuck try to get them involved.
Try that, if you are still stuck send me your steps from beginning to end then I will see if I can see something obvious.
Regards,
Phillip
October 4, 2011 at 6:14 pm
I am also using nCipher, thank you for the response. I will respond if this also resolves our issue.
Jamie
October 4, 2011 at 6:17 pm
Can you also provide information on how you upgraded that file? Did MSFT provide it?
Thanks,
Jamie
October 4, 2011 at 6:19 pm
Good Luck Jamie!
By the way I am running MSQL 2008 R2 on Windows Server 2008 do not know if that will help you.
October 4, 2011 at 6:27 pm
I am on sql 2008 R2 on Windows Server 2008 as well. ANy help is much appreciated as we have been wrestling with issues for several months. Please let me know more information on upgrading that file and if you have any other suggestions would be greatly appreciated!
Jamie
October 4, 2011 at 6:29 pm
No I just downloaded the latest version
product version 8.00.50727.1833
October 4, 2011 at 6:34 pm
Jamie
If you do not succeed let me know, you will have to wait a couple of hours though, I am in South-Africa and was busy with a job order. So it is 02:30 in the morning and going to bed now 😉
So any issues let me know and I will send the link for the download when I get to the office.
Regards,
Phillip
October 4, 2011 at 7:29 pm
Thank you so much, you have been incredibly helpful.
When you get a chance, please let me know if this is the correct one - or send me whatever you have.
http://support.microsoft.com/kb/2538242
Jamie
October 5, 2011 at 2:29 am
Hi Jamie
Looked at the production server, this is what you should install or any version higher/later than this
Download this--- make a backup of the old incase...
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=15336
Current Version on our production
8.0.50727.4053
Filename that will be installed included in above package
msvcr80.dll
File will be located in c:\windows\winsxs\....
Hope this helps!
Regards,
Phillip
October 5, 2011 at 2:30 am
Seems there is a newer version
October 5, 2011 at 2:37 am
Jamie
Check the msvcr80.dll package right click on the dll properties and check details ensure that the product version is
8.0.50727.4053 or higher... the last link I sent you is a newer version that I have, that should work!
http://www.microsoft.com/download/en/details.aspx?id=5555 ----- vir die X86 version
If you strugle send me your email address and I will forward you what we have installed.
Regards,
Phillip
October 5, 2011 at 9:17 am
we are working with nCipher right now to validate. Thanks for all the details.
Jamie
Viewing 15 posts - 1 through 15 (of 18 total)
You must be logged in to reply to this topic. Login to reply